$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: acdVWhb5rEgp+RUjovhzLW0h/tfuF2CTJEeD2aInlf0= Subject key identifier: 28:14:36:5E:B8:3B:95:D6:D3:7F:48:65:CD:D0:F7:C8:41:2A:82:AB Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 1272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 1260 Signing time: Fri 30 May 2025 17:17:27 +0000 Manifest this update: Fri 30 May 2025 17:17:26 +0000 Manifest next update: Fri 06 Jun 2025 17:17:26 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: wWK+v/ZeBpW95xFMpUijD083KRSqb8F1bkcD714vW0w=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4722 (0x1272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: May 30 17:17:26 2025 GMT Not After : Jun 6 17:17:26 2025 GMT Subject: CN=6839e826-bf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:2a:88:95:6e:fc:ce:e8:7e:a7:cf:f0:74: c6:0b:68:cd:d5:1f:b0:72:79:8f:39:64:d2:a2:96: e8:45:46:e6:f9:e4:00:61:a7:06:c5:96:a1:4e:f7: 42:01:cb:a8:d1:e9:0c:01:7f:17:b2:9f:ab:f5:74: d5:c8:31:d9:bd:45:60:2f:fb:ec:46:32:26:73:e4: 1c:94:12:df:3e:36:9e:2c:74:b4:ea:41:fe:62:77: aa:6f:19:e5:80:00:32:46:32:cb:7b:2a:e0:94:ba: a5:b1:b2:f1:6a:6b:3c:03:83:8b:9e:c9:85:08:c7: bc:88:0e:c8:da:3b:b3:1f:da:98:aa:2a:4f:47:8a: cd:3e:98:34:8e:b6:21:58:65:2c:ef:5e:7e:e8:5d: 3b:ea:78:e0:61:d1:ba:09:cc:b2:6f:a9:ba:e2:60: 71:40:7c:86:f9:9e:85:ef:e1:e4:69:73:db:5a:7f: 58:9d:72:1f:d4:aa:7a:0f:97:3b:62:02:01:ed:c9: db:e1:92:66:e2:7b:40:ae:ca:50:5e:ce:56:c1:dd: 91:7c:79:4a:e2:7f:0d:c4:c7:ff:78:b1:e5:59:6c: d7:3a:72:cb:66:ad:31:d7:4e:56:7c:16:61:79:1f: 9f:f7:e6:67:37:50:5b:32:ea:ab:c7:6c:26:c8:3d: 6c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:14:36:5E:B8:3B:95:D6:D3:7F:48:65:CD:D0:F7:C8:41:2A:82:AB X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:21:b7:de:a9:ce:43:80:d7:72:2e:ad:da:4b:8d:5d:88:75: 78:a9:af:81:13:10:b6:4f:a6:6f:23:11:cd:04:a0:0b:e9:29: c8:f7:d4:00:f3:14:2a:0d:d2:8e:ce:ea:88:e0:f5:d8:3c:81: 7a:6a:40:be:ce:75:84:d8:af:cc:65:92:2b:ba:7b:5c:f3:c3: 56:0d:73:5c:99:05:ff:65:9c:bd:df:c0:b1:9d:b5:79:4e:48: a1:b4:8b:df:97:0a:8c:e1:a2:c9:7d:f2:65:a3:e2:b3:a2:73: f2:26:14:79:af:cd:1e:61:d8:7c:51:3f:3b:d3:1e:08:7f:f1: dc:11:ff:9a:ee:3d:76:20:a4:c2:25:0a:b6:db:84:26:fa:0f: 43:37:84:30:2c:0d:2b:cd:f6:be:6a:94:18:9f:c5:71:9b:d6: af:78:5b:fc:3f:b9:ab:da:ad:e7:e2:97:50:b6:0a:2e:18:3c: 16:ea:ed:79:83:de:fe:18:f4:a5:42:6b:87:0f:ae:de:39:ee: 0a:10:8b:b4:87:57:42:9f:3e:5b:9b:0b:c4:d3:8a:87:6f:b7: 1f:ec:a8:05:2d:f7:bd:e3:d3:b7:cc:81:3b:15:68:45:66:fe: ef:96:cf:ac:51:7a:bf:5b:f1:42:d6:09:a4:3e:63:74:40:06: 3d:b4:fc:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUwNTMwMTcxNzI2WhcNMjUwNjA2MTcxNzI2WjAYMRYwFAYD VQQDEw02ODM5ZTgyNi1iZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKUqiJVu/M7ofqfP8HTGC2jN1R+wcnmPOWTSopboRUbm+eQAYacGxZahTvdC Acuo0ekMAX8Xsp+r9XTVyDHZvUVgL/vsRjImc+QclBLfPjaeLHS06kH+Yneqbxnl gAAyRjLLeyrglLqlsbLxams8A4OLnsmFCMe8iA7I2juzH9qYqipPR4rNPpg0jrYh WGUs715+6F076njgYdG6Ccyyb6m64mBxQHyG+Z6F7+HkaXPbWn9YnXIf1Kp6D5c7 YgIB7cnb4ZJm4ntArspQXs5Wwd2RfHlK4n8NxMf/eLHlWWzXOnLLZq0x105WfBZh eR+f9+ZnN1BbMuqrx2wmyD1sAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgUNl64 O5XW039IZc3Q98hBKoKrMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLIbfeqc5DgNdyLq3aS41diHV4qa+BExC2T6ZvIxHNBKAL6SnI99QA 8xQqDdKOzuqI4PXYPIF6akC+znWE2K/MZZIruntc88NWDXNcmQX/ZZy938CxnbV5 TkihtIvflwqM4aLJffJlo+KzonPyJhR5r80eYdh8UT870x4If/HcEf+a7j12IKTC JQq224Qm+g9DN4QwLA0rzfa+apQYn8Vxm9aveFv8P7mr2q3n4pdQtgouGDwW6u15 g97+GPSlQmuHD67eOe4KEIu0h1dCnz5bmwvE04qHb7cf7KgFLfe949O3zIE7FWhF Zv7vls+sUXq/W/FC1gmkPmN0QAY9tPy5 -----END CERTIFICATE-----Generated at Sat May 31 17:44:06 2025 by rpki-client